Privacy Policy 589 – Your Data, Our Responsibility

1Introduction & Scope of Privacy Policy

589 ("we", "Platform") is fully committed to protecting the privacy of every user who entrusts their personal information to us. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

This document clearly outlines the types of data we collect, the purpose of collection, retention periods and your rights as the data owner. We believe transparency is the foundation of trust, and we want you to fully understand how your information is managed on the 589 platform.

This Policy applies to all information collected through the official 589 website, mobile app, email communications, customer support interactions and any other channels you use to interact with us.

2Types of Personal Data We Collect

We collect personal data in two main categories — information you provide directly to us, and information collected automatically when you use the 589 platform.

Data you provide directly:

Data collected automatically:

• IP address and general geolocation data (country/state level)
• Web browser type, operating system and device type
• Pages visited, time spent on each page and in-platform actions
• Game activity records and transaction history
• Login session data including access time and location
• Technical information required to resolve technical issues

3How We Use Your Personal Data

Every piece of data we collect is used for legitimate, clearly stated purposes. Below are the primary purposes for which your personal data is used on the 589 platform:

• Account Management: Creating, verifying, and managing your account at 589, including the KYC process and information updates.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Service Delivery: Providing access to all games, promotions, and platform features you are eligible to enjoy.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and other illegal activities that could harm the platform or other users.
• Customer Support: Resolving your enquiries, complaints, and support requests more efficiently.
• Platform Improvements: Analysing usage patterns to improve user experience, technical performance, and new features.
• Legal Compliance: Meeting reporting and compliance obligations with relevant authorities in Malaysia.
• Marketing Communications: Sending promotional information, exclusive offers, and the latest updates — only with your consent, and you may unsubscribe at any time.

4Data Storage & Security Measures

Your data security is our highest priority. 589 implements multiple layers of technical and organisational safeguards to protect your data from unauthorised access, loss, or misuse.

Technical security measures we implement:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• AES-256 encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) for user account access and internal administrative access.
• 24/7 security monitoring with automated intrusion detection systems.
• Regular security audits conducted by independent third-party security auditors.
• Strict access controls — internal staff can only access data required for their specific roles.

Data retention period: We retain your personal data for as long as your account is active and for any additional period required by Malaysian law. Financial transaction records are kept for a minimum of 7 years in accordance with anti-money laundering legal requirements. Once an account is closed, data that is no longer needed will be securely deleted.

5Data Sharing with Third Parties

589 does not sell or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following parties within limited and controlled circumstances:

• Payment Service Providers: Trusted FPX, e-wallet, and payment processor providers to process your transactions — only the minimum data required for each transaction is shared.
• Identity Verification Providers: Third parties assisting with KYC and age verification processes, subject to strict confidentiality agreements.
• Technology Service Providers: Hosting, cybersecurity, and infrastructure companies that help us operate the platform — all bound by data protection agreements.
• Statutory Authorities: Law enforcement bodies, tax authorities or Malaysian government agencies when required by law or court order.

All third parties we work with are required to meet data protection standards equal to or higher than our own. We conduct regular reviews of all partners to ensure ongoing compliance.

6Cookies & Tracking Technologies

589 uses cookies and similar tracking technologies to enhance your browsing experience, secure your session, and help us understand how users interact with our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve performance and content.
• Functional Cookies: Saving your preferences such as language, display settings, and login details for a seamless return experience.
• Analytics Cookies: Used to analyze platform traffic in aggregate and anonymized form for service improvement purposes.

You may manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the 589 platform.

7Your Rights as a Data Owner

Under Malaysia's PDPA and our own policies, you have the following rights regarding your personal data held by 589:

To exercise any of the above rights, contact the 589 support team via Live Chat within the platform or our support email. We may need to verify your identity before processing your request to protect the security of your account.

8Protection of Children's Data

The 589 platform is a service intended strictly for individuals aged 18 and above. We do not intentionally collect, store or process personal data from children or minors.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account on 589 are requested to contact us immediately.

9International Data Transfers

In the context of global platform operations, your personal data may be processed or stored on servers located outside Malaysia. When international data transfers occur, we ensure that:

• The recipient country or organisation provides a level of data protection equivalent to or higher than that required under Malaysian law.
• Appropriate data transfer agreements have been established, including internationally recognised Standard Contractual Clauses.
• All data transfers are carried out with end-to-end encryption to ensure security throughout the transmission process.
• Data transfer records are retained and available for review by relevant authorities if required.

You may contact us for more information about the data custodians involved in any international data transfers related to your account.

10Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the 589 platform — the fastest way to get a response.
• Privacy Email: [email protected] — state "Privacy Inquiry" in your email subject line.
• FAQ: Visit page Frequently Asked Questions us for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within 3–5 business days. For official data rights requests (access, correction, deletion), the response period is 21 business days in accordance with Malaysia's PDPA requirements.

589 also has an internally appointed Data Protection Officer to oversee all aspects of our privacy compliance. Any complaints that cannot be resolved through the above channels may be referred directly to the Personal Data Protection Commissioner of Malaysia.